PT-2017-9609

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Core Banking versions 5.1.0, 5.2.0, 11.5.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking, resulting in unauthorized read access to a subset of...

CVE-2017-3262: Undefined Security Weakness

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Java Mission Control. The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

CVE-2016-8324: Improper Access Control

Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2017-9598

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful...

PT-2017-9608

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Private Banking versions 2.0.1, 2.2.0, 12.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Private Banking. Successful attacks require human interaction from ...

PT-2017-15759

Name of the Vulnerable Software and Affected Versions Oracle Commerce Platform versions 10.0.3.5, 10.2.0.5, 11.2.0.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Commerce Platform, requiring human interaction from a person other th...

PT-2017-9613

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Investor Servicing versions 12.0.1, 12.0.2, 12.0.4, 12.1.0, and 12.3.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks...

PT-2017-15719

Name of the Vulnerable Software and Affected Versions Oracle GlassFish Server versions 3.0.1 and 3.1.2 Description The issue allows a low-privileged attacker with logon access to the infrastructure where Oracle GlassFish Server executes to compromise Oracle GlassFish Server. Successful attacks ca...

CVE-2017-3231: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

PT-2017-9618

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Core Banking versions 5.1.0, 5.2.0, 11.5.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Core Banking, resulting in unauthorized read access to a subset of...

CVE-2017-3240: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where RDBMS Security executes to compromise...

CVE-2016-8307: Improper Access Control

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2017-3261: Undefined Security Weakness

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

PT-2017-15721

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Direct Banking versions 12.0.2 and 12.0.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a...

PT-2017-9602

Name of the Vulnerable Software and Affected Versions Oracle FLEXCUBE Universal Banking versions 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, and 12.2.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking,...

Oracle FLEXCUBE Core Banking Unauthorized Read Vulnerability

Oracle FLEXCUBE Core Banking is a product of Oracle Corporation Oracle. Its application architecture supports agile and business process management using Business Process Execution Language BPEL, Service-Oriented Architecture SOA, and Web services-based models. An unauthorized read vulnerability...

Oracle FLEXCUBE Core Banking Unauthorized Read Vulnerability (CNVD-2017-00891)

Oracle FLEXCUBE Core Banking is a product of Oracle Corporation Oracle. Its application architecture supports agile and business process management using Business Process Execution Language BPEL, Service-Oriented Architecture SOA, and Web services-based models. An unauthorized read vulnerability...

Oracle FLEXCUBE Core Banking Unauthorized Read Vulnerability (CNVD-2017-00889)

Oracle FLEXCUBE Core Banking is a product of Oracle Corporation Oracle. Its application architecture supports agile and business process management using Business Process Execution Language BPEL, Service-Oriented Architecture SOA, and Web services-based models. An unauthorized read vulnerability...

OpenJDK: integer overflow in SocketOutputStream boundary check (Networking, 8164147)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

PT-2017-1137

Name of the Vulnerable Software and Affected Versions Java SE versions 6u131, 7u121, and 8u112 Description The issue is related to a vulnerability in the Java SE component, specifically in the Deployment subcomponent. This vulnerability allows an unauthenticated attacker with network access via...